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Top Stories 

• Anadarko Petroleum Corp., reached a $5.15 billion settlement April 3 with the federal 
government to settle claims related to the cleanup of thousands of sites tainted with 
hazardous chemicals for decades. - Associated Press (See item 3 ) 

• Security researchers presenting April 4 at the SyScan security conference demonstrated 
how mobile point-of-sale systems can be compromised through several attack techniques, 
allowing criminals to capture payment card data, cause the devices to accept fraudulent 
cards, and perform other actions. - SC Magazine (See item 8) 

• Health officials are investigating in response to a stomach illness that affected more than 
100 people who ate at Wild Chef Japanese Steakhouse Grill and Bar in Holland Township, 
Michigan, between March 27 and April 1. - WZZM 13 Grand Rapids (See item 19 ) 

• Authorities are investigating after 4 suspicious fires were set within 6 hours in Sacramento, 
California, April 3, including one that destroyed 2 commercial buildings. - KCRA 3 
Sacramento (See item 32 ) 
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Energy Sector 



1. April 4, Arkansas Democrat-Gazette - (Arkansas) Thousands in dark after severe 
storms move through. More than 23,000 Entergy Arkansas customers remained 
without power April 4 after a series of storms moved through the State beginning April 
3, damaging several homes, buildings, and Camden Fairview High School. 

Source: http://www.arkansasonline.com/news/2014/apr/04/thousands-without-power- 
after-severe-storms-move-t/ 

2. April 4, Associated Press; Appalachian News-Express - (Kentucky) Official: About 
4,200 gallons of crude oil spilled at Pike County well, cleanup ongoing. Kinzer 
Drilling notified officials after a rock slide damaged or overturned a storage container 
at an oil well in Harmons Branch in Pikeville, spilling about 4,200 gallons of crude oil 
into streams and the Levisa Fork River April 3. 

Source: 

http://www.tribtown.com/view/storv/ea677764718d45c38c969be3f007e293/KY— Oil- 
Spill 

3. April 3, Associated Press - (National) US reaches $5.15 billion environmental 
settlement. Anadarko Petroleum Corp., reached a $5.15 billion settlement April 3 with 
the federal government to settle claims related to the cleanup of thousands of sites 
tainted with hazardous chemicals for decades. The settlement includes a trust that 
covers cleanup of contaminated sites nationwide and resolves a legal battle over 
Tronox Inc., a spinoff of Kerr-McGee Corp., a company which Anadarko acquired in 
2006. 

Source: http://www.wistv.com/story/25156392/us-reaches-5 15 -billion-environmental- 
settlement 

4. April 3, Associated Press - (West Virginia) W.Va. regulators cite gas company for 
operating storage tanks without proper permits. The West Virginia Department of 
Environmental Protection cited Jay-Bee Oil & Gas Inc., April 2, for having storage 
tanks at its natural gas well site without the proper permits. The violation notice was 
issued when officials reported that six storage tanks are being used to collect natural 
gas liquids which can produce vapors at the drilling site in the Big Run area in 
Charleston. 

Source: 

http://www.greenfieldreporter.com/view/story/llb9d38e5a254671a41240672f25e730/ 
WV— Gas-Well-Violation 



For another story, see item 17 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

5. April 2, Kennewick Tri-City Herald - (Washington) Inspector General says Hanford 
capsules at risk in earthquake. A U.S. Department of Energy memo released April 3 
recommended that capsules storing radioactive material at a part of the Hanford Site be 
moved to dry storage as soon as possible due to their age and the potential risk to the 
capsules during an earthquake. 

Source: http://www.tri-citvherald.com/2014/04/02/2908764/inspector-general-says- 
hanford.html?sp=/99/177/&ihp=l 

T Return to top i 

Critical Manufacturing Sector 

6. April 4, Reuters - (National) Gasoline-loving spiders cause Mazda car recall for 
second time. Mazda announced a recall of around 42,000 model year 2010-2012 
Mazda 6 vehicles due to the potential for a certain species of spider that is attracted to 
gasoline to spin webs that can restrict fuel flow, reduce fuel tank pressure during 
emission control system purges, and put stress on the fuel tank. 

Source: http://money.msn.com/business- 
news/article.aspx?feed=QBR&date=20 1 40404&id= 17497794 

7. April 4, U.S. Consumer Product Safety Commission - (International) Hussong 
Manufacturing and American Flame recall three gas fireplaces, fireplace inserts 
due to explosion hazard. Hussong Manufacturing announced a recall of around 15,770 
Kozy Heat Ambiance and Stellar Hearth gas fireplaces and fireplace inserts in the U.S. 
and Canada due to an issue that could allow the control module to allow gas to be 
released, posing an explosion hazard. 

Source: http://www.cpsc.gov/en/Recalls/2014/Hussong-Manufacturing-and-American- 
Flame-Recall-Three-Gas-Fireplaces-and-Fireplace-Inserts/ 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

8. April 4, SC Magazine - (International) Millions of consumers at risk from mobile 
POS flaws. Security researchers from MWR InfoSecurity presenting April 4 at the 
SyScan security conference demonstrated how mobile point-of-sale (MPOS) systems 
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can be compromised through several attack techniques, allowing criminals to capture 
payment card data, cause the devices to accept fraudulent cards, and perform other 
actions. The vulnerabilities were reported to affect popular MPOS devices but the 
researchers did not disclose which models are affected. 

Source: http://www.scmagazineuk.com/millions-of-consumers-at-risk-from-mobile- 
pos-flaws/article/34 1 323/ 

9. April 3, CSO - (International) Zeus malware found with valid digital certificate. 
Comodo researchers April 3 reported finding a variant of the Zeus banking malware 
that includes a valid digital certificate, making it appear to be a trustworthy Internet 
Explorer document. 

Source: http://www.networkworld.com/news/2014/040414-zeus-malware-found-with- 
valid-280416.html 

10. April 3, Softpedia - (International) Bankeiya info-stealer trojan used in attacks 
against Japanese users. Researchers at Symantec analyzed operations involving the 
Infostealer.Bankeiya bank account information stealing malware and found that it used 
vulnerabilities in Internet Explorer and Java SE to steal large amounts of banking data 
from Japanese users. The researchers also reported that the Infostealer.Ayufos and 
Infostealer.Torpplar malware were also commonly used to target online banking users 
in that country. 

Source: http://news.softpedia.com/news/Bankeiya-Info-Stealer-Troian-Used-in- 
Attacks-Against-Japanese-Users-435715.shtml 

11. April 3, Oyster Bay Patch - (New York) Couple pleads guilty in LIRR ‘skimmer’ 
scam. A New York City couple pleaded guilty April 3 to placing skimming devices and 
hidden cameras on Long Island Rail Road ticket machines at the Sea Cliff station in 
order to obtain payment card information and manufacture fraudulent cards. Two 
others involved in the scheme previously pleaded guilty, and one man also charged in 
the scheme remains at large after fleeing to the U.K. 

Source: http://ovsterbav.patch.com/ groups/police-and-fire/p/couple-pleads-guiltv-in- 
lirr-skimmer-scam 



12. April 3, U.S. Securities and Exchange Commission - (Maryland; Virginia) SEC 

charges two friends with insider trading ahead of impending acquisition. The U.S. 
Securities and Exchange Commission April 3 charged a Maryland man and a Virginia 
man with allegedly engaging in insider trading that resulted in around $1 million in 
illicit profits ahead of the acquisition of The Shaw Group by Chicago Bridge & Iron 
Company. A man who worked at a firm involved in the deal was previously charged in 
a related insider trading case. 

Source: http://www.sec.gov/News/PressRelease/Detail/PressRelease/1370541394568 

13. April 4, WCAU 10 Philadelphia - (New Jersey) Owners of famed Jersey Shore 
pizzeria skimmed thousands off the top: Pros. The owners of the Manco and Manco 
pizza restaurants in Ocean City, New Jersey were arrested April 3 and charged with 
allegedly skimming money from the pizza shops between 2007 and 2011 when they 
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were employed there prior to buying the chain, and for also allegedly concealing 
around $1 million in income from the Internal Revenue Service. 

Source: http://www.nbcphiladelphia.com/news/business/Tax-Charge-Manco-Pizza- 
Owners-253740491.html 



14. April 2, U.S. Attorney’s Office, Eastern District of New York - (New York; California) 

Former bank CEO and president charged with bank fraud, conspiracy, and 
perjury. The former CEO and president of California-based Gateway Bank FSB was 
indicted in federal court in New York for allegedly engaging in a scheme to deceive 
regulators and observers through a $15 million “round-trip” of loan funds between 
three entities for the purpose of appearing to remove toxic assets from the ha nk ’s 
books. 

Source: http://www.fbi.gov/newvork/press-releases/2014/former-bank-ceo-and- 
president-charged-with-bank-fraud-conspiracy-and-perjury 

For another story, see item 30 
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Transportation Systems Sector 

15. April 4, WSAZ 3 Huntington - (West Virginia) Interstate 64 reopens following 
emergency power repairs. Interstate 64 east and westbound lanes was shut down for 
about 2 hours April 3 for emergency power line repairs. 

Source: http://www.wsaz.com/news/charlestonnews/headlines/Interstate-64-Closes-for- 
Emergency-Power-Repairs-253838061.html 

16. April 3, Studio City Patch - (California) Car collides with big rig on 101 in Studio 
City, one dead. Southbound Hollywood (101) Freeway in Studio City was closed for 
about 3 hours and one man was killed after his vehicle rear-ended a semi-truck April 3. 
Source: http://studiocitv.patch.com/groups/police-and-fire/p/car-collides-with-big-rig- 
on- 101 -in-studio-city-one-dead 

17. April 2, Burlington Times News - (North Carolina) Tanker overturns on interstate, 
spilling ethanol, snarling traffic. Interstate 40/85 was shut down for several hours and 
traffic was rerouted April 2 after a semi-truck carrying 7,600 gallons of ethanol 
overturned and spilled about 300 gallons of ethanol onto the highway near exit 141at 
Huffman Mill Road. The leak was contained before it reached any storm drains or 
ditches. 

Source: http://www.thetimesnews.com/news/top-news/updated-tanker-overturns-on- 
interstate-spilling-ethanol-snarling-traffic-1 ,300072 

18. April 2, Beaufort County Island Packet - (South Carolina) Hazardous materials spill 
after wreck on Hilton Head. A crash involving 3 vehicles, including one carrying 
muriatic acid, bulk dry chlorine, pool shock sticks, and gasoline, prompted a HAZMAT 
response in the Town of Hilton Head Island April 2. All lanes of William Hilton 
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Parkway were closed for 2 hours while crews coordinated cleanup of the chemicals. 
Source: http://www.thestate.corn/2014/04/02/3363548/part-of-william-hilton- 
parkway.html 



[ Return to top ] 

Food and Agriculture Sector 

19. April 4, WZZM 13 Grand Rapids - (Michigan) 100+ sickened at Holland restaurant. 
Ottawa Health Department officials are investigating in response to a stomach illness 
that affected more than 100 people who ate at Wild Chef Japanese Steakhouse Grill and 
Bar in Holland Township, Michigan, between March 27 and April 1. The restaurant 
voluntarily closed April 1 for a health department inspection. 

Source: http://www.wzzml3.com/story/news/local/holland- 

zeeland/2014/04/02/holland-restaurant-closes-after-reports-of-stomach- 

illness/7222803/ 



20. April 3, WNBC 4 New York City - (New York) Chinatown skin infection outbreak 
spreads in NYC, number of cases doubles. New York City health officials stated 
April 2 that the number of individuals suspected of having a rare skin infection 
associated with the handling of raw seafood has risen to 66, up from 30 cases reported 
in March. Officials advised those purchasing raw fish and seafood at Chinatowns in 
New York City’s Manhattan, Queens, or Brooklyn neighborhoods to wear gloves when 
handling those items, and noted that those who eat seafood from the markets are not at 
risk. 

Source: http://www.nbcnewvork.com/news/local/Chinatown-Skin-Infection-Raw-Fish- 
Cases-Spread-253622021.html 

21. April 3, U.S. Food and Drug Administration - (National) Koru Pacific Packaging 
announces a voluntary recall for one lot # AHJLASKA Organic Cocoa Non-Dairy 
Chocolate mix, 12 oz. canister due to possible milk allergen. KORU Pacific 
Packaging of Tracy, California, announced a voluntary recall of 12-ounce packages of 
its AHILASKA Organic Cocoa Non-Dairy Chocolate powdered mix due to undeclared 
milk. 

Source: http://www.fda.gov/Safetv/Recalls/ucm391776.htm 

22. April 2, Grand Rapids Press - (Michigan) Noro virus identified as source in Beltline 
Bar food illness outbreak. The Kent County Health Department announced April 2 
that norovirus was identified as a source of a food illness outbreak that affected at least 
145 patrons of the Beltline Bar in Grand Rapids. The restaurant cleaned and disinfected 
the restaurant before reopening. 

Source: http://www.mlive.com/news/grand- 
rapids/index.ssf/2014/04/norovirus identified as source l.html 
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Water and Wastewater Systems Sector 



23. April 3, WLWT 5 Cincinnati - (Kentucky) 1.5M+ gallons of raw sewage leaks into 
Ky. stream. The operators of a sewage plant in Bullitt County were forced to use 
temporary holding and processing tanks to handle wastewater following a May 29 
failure that caused over 1 .5 million gallons of raw sewage to leak onto the ground and 
into a nearby stream. The plant’s 600 Hunters Hollow customers were asked to 
conserve water so that the temporary tanks do not become overwhelmed. 

Source: http://www.wlwt.com/news/15m-gallons-of-raw-sewage-leaks-into-ky- 
stream/253 15396 

For another story, see item 2 
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Healthcare and Public Health Sector 

24. April 3, Roanoke Times - (Virginia) LewisGale patients notified of data breach. 
LewisGale Regional Health System notified 40 patients in southwest Virginia of a 
personal data breach after a former employee of a billing service for the health system 
allegedly obtained records from August 2012 through April 2013. The employee was 
terminated and is under investigation. 

Source: http://www.roanoke.com/news/lewisgale-patients-notified-of-data- 
breaeh/artide 3d5b4c9a-bb3a-l Ie3-a946-0017a43b2370.html 

25. April 3, Associated Press - (National) FDA approves easy-to-use heroin overdose 
antidote. The U.S. Food and Drug Administration approved April 3 an antidote for 
individuals in cases of heroin or opioid overdoses. Doctors may prescribe the device, 
which automatically injects the right dose of naloxone, to family members or caregivers 
to keep on hand. 

Source: http://news.msn.com/us/fda-approves-easv-to-use-heroin-overdose-antidote 
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Government Facilities Sector 

26. April 4, Burlington County Times - (New Jersey) Life Center Academy in Florence 
closed due to threat. The Life Center Academy in Florence closed April 3 after a 
student received a threatening text message April 2. Classes will resume April 4 after 
police searched the school and deemed it safe. 

Source: http://www.burlingtoncountytimes.com/news/local/life-center-academv-in- 
dorence-dosed-due-to-tlireat/artide b69624a4-6666-58fd-bcb5-43387a071ec6.html 

27. April 3, Lakeland Ledger - (Florida) Social Security numbers of 530 Polk County 
School District employees exposed. Officials reported April 3 that the Social Security 
numbers of 530 Polk County School District employees in Florida were publicly 
available online for 2 years until they were taken down in March. Authorities continue 
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to investigate the incident but believe an employee inadvertently posted the full 
document containing the information online. 

Source: http ://w w w. theledger.com/artic le/20 1 40403/NEW S/1 40409776 

28. April 3, Boston Globe - (Connecticut; Massachusetts) UConn issues ‘shelter in place’ 
due to bomb threat. The University of Connecticut sent an alert to students on its 
main campus in Storrs advising them to evacuate the Tasker Building or shelter in 
place after a bomb threat was phoned into its admissions office April 3. Classes 
resumed at the university after 2 hours while authorities investigated Boston University 
in Massachusetts due to a bomb threat that was also phoned in. 

Source: http://www.boston.com/news/local/connecticut/2014/04/03/uconn-issues- 
shelter-place-due-bomb-threat/2L73 vbAHF 1 A3EbACZF2LvM/story.html 

29. April 3, Northern Virginia Daily - (Virginia) Strasburg department homeless as 
building evacuated. The Department of Public Works building in Strasburg, Virginia, 
was vacated April 3 and workers were evacuated due to safety reasons as cracks were 
present in walls throughout the facility, creating the potential for a building collapse. 
Officials are investigating the structure in order to determine what repairs are required. 
Source: http://www.nvdaily.com/news/2014/04/strasburg-department-homeless-as- 
building-evacuated.php 

For additional stories, see items 1 and 31 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

30. April 4, Softpedia - (International) Android trojan Waller sends premium SMSs, 
steals money from QIWI wallets. Researchers at Kaspersky analyzed a piece of 
Android malware known as SMS.AndroidOS.Waller.a which can use infected devices 
to send SMSs to premium-rate numbers to earn criminals money and can also steal 
funds from Visa QIWI Wallet accounts. The malware can also perform other tasks such 
as update itself and install other malware. 

Source: http://news.softpedia.com/news/Android-Trojan-Waller-Sends-Premium- 
SMSs-Steals-Money-from-QIWTWallets-435898.shtml 

For another story, see item 9 
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Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

31. April 4, WFSB 3 Hartford - (Connecticut) Fire out, cleanup continues in Torrington. 
A 4 alarm fire broke out April 3 at the Toce Tire Warehouse facility in Torrington, 
resulting in a city-wide shelter in place order and the evacuation of about 50 nearby 
homes that lasted approximately 12 hours. A nearby kindergarten canceled afternoon 
classes due to the smoke and fire while other schools had bus routes or other activities 
disrupted. 

Source: http://www.wfsb.com/storv/25151687/mutual-aid-requested-to-battle-tire- 
shop-fire-in-torrington 

32. April 4, KCRA 3 Sacramento - (California) Firefighters assess damage at site of 
'suspicious' fire. Authorities are investigating after 4 suspicious fires were set within 6 
hours in Sacramento April 3, including one that destroyed 2 commercial buildings 
occupied by Sacramento Theatrical Lighting Annex. 

Source: http://www.kcra.com/news/flames-shoot-up-from-sacramento- 
building/253 15988 

33. April 4, KXAN 36 Austin - (Texas) Overnight fire destroys east Austin business. An 
April 4 fire at Yuli’s Cleaners, located in an Austin strip mall, caused an estimated 
$350,000 in damage. Firefighters contained the fire before it could spread to nearby 
businesses, which suffered minor smoke damage. 

Source: http://kxan.com/2014/04/04/ovemight-fire-damages-east-austin-business/ 

34. April 3, KCBS 2 Los Angeles - (California) Arson team investigating cause of 
Downey office building fire. A 2 alarm fire broke out April 3 at a Downey, California 
office building that housed legal and medical offices, a tax preparer, and a real estate 
business. Arson investigators are working to determine the cause of the fire, which they 
believe was fueled by a gas leak. 

Source: http://losangeles.cbslocal.com/2014/04/03/arson-team-investigating-cause-of- 
downey-office-building-fire/ 
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Dams Sector 



35. April 4, Bridgeton Daily Journal - (New Jersey) Bridgeton gets FEMA cash for 
Sunset Lake dam work. Sunset Lake Raceway Dam in Bridgeton City Park received 
$2.9 million in funding from the Federal Emergency Management Agency (FEMA) to 
be applied to the estimated $5.4 million price for repairs to the dam that has been 
damaged since 2011 when heavy rains led to flooding that caused a section to fail. 
Source: 

http://www.thedailviournal.com/article/20140404/NEWS01/304020030/Bridgeton- 

gets-FEMA-cash-Sunset-Lake-dam-work 

36. April 4, Bradenton Herald - (Florida) Manatee County Commission ratifies $14M 
dam fix. The Manatee County Commission ratified a $14 million contract April 3 to 
complete emergency repairs to the East Manatee Dam in two phases, aimed at being 
completed before June when the rainy season begins. The dam currently suffers from 
soil erosion and loose materials within the dam’s earthen core that are causing 
instability. 

Source: http://www.bradenton.com/2014/04/04/5084413/manatee-countv-commission- 
ratifies.html 
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